Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a18d866-9fb0-44dc-8cfd-5461500736e2.roa
File: 7a18d866-9fb0-44dc-8cfd-5461500736e2.roa (raw, json)
Hash identifier: 0VUcLq2njfKtFtS7IA5WPXGPUp7un7pGUxRdwLR4orc=
Subject key identifier: 59:E8:9C:53:A7:06:79:F5:3F:5F:1A:BF:51:9C:6C:C0:E1:AA:7E:78
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 48190F07B7A4F86ED1CC2F1CA24010F58FAB0A97
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a18d866-9fb0-44dc-8cfd-5461500736e2.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 175.41.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:19:0f:07:b7:a4:f8:6e:d1:cc:2f:1c:a2:40:10:f5:8f:ab:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:85:30:0c:7a:8e:3a:9c:d1:f6:df:fb:80:
5e:cf:62:54:0e:89:c4:18:50:30:cf:18:19:ae:0d:
c3:51:5c:7e:00:9d:3d:75:a2:66:a4:89:ce:d3:51:
79:ee:41:d6:f3:e6:f8:94:a7:3e:d1:c5:6d:83:5a:
ce:a0:1a:c5:93:3c:4d:4f:ab:f8:77:4f:76:1e:69:
81:2c:b0:b0:88:1f:82:83:a1:89:22:a3:b4:5d:c3:
fe:c8:1d:fa:4d:2a:d9:48:89:d9:a4:3e:aa:fc:25:
a7:c1:bd:4e:92:4d:c0:6b:99:2b:30:dc:b2:a1:0e:
31:e5:11:64:a4:f9:8d:15:ac:95:ee:78:14:5b:02:
10:84:09:05:0e:5d:14:2c:28:0b:71:14:51:d9:29:
c5:a4:d1:1f:e2:27:91:25:d5:ff:3f:e5:cb:03:2b:
5a:d2:94:0f:d6:ac:91:8c:33:2e:61:7f:27:ed:a0:
ab:f5:c0:a4:ad:7e:d8:27:90:2d:fc:58:69:4c:fe:
71:0b:ce:81:51:3b:46:9d:94:43:e6:15:2f:3e:d8:
2a:55:b9:0a:72:ee:7a:e5:9d:4f:cb:41:cf:c2:e8:
73:e8:6b:90:9b:08:cb:94:59:03:10:dc:e7:09:9d:
17:95:c3:2c:27:f7:d8:e3:8f:50:0f:e6:b9:13:1b:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:9C:53:A7:06:79:F5:3F:5F:1A:BF:51:9C:6C:C0:E1:AA:7E:78
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a18d866-9fb0-44dc-8cfd-5461500736e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.41.192.0/18
Signature Algorithm: sha256WithRSAEncryption
64:93:34:be:38:18:5d:41:e2:a2:bb:91:65:72:65:43:6f:87:
f0:c0:33:35:d5:35:ef:3c:67:e2:cd:ad:4a:bb:a0:e6:4c:9e:
25:c6:e7:d0:8e:7f:32:76:26:df:ce:21:19:a2:88:88:97:7d:
37:78:87:17:65:78:9e:1e:97:34:20:78:f0:05:3d:28:ff:0d:
48:d7:ff:e3:f7:5c:4c:0b:97:8f:3a:4c:2e:45:02:bb:89:c6:
88:0a:95:b1:cb:ac:84:7f:34:01:14:e0:64:9f:98:0f:58:e0:
ae:e4:ed:fe:55:22:d8:e7:49:bd:9b:84:b1:27:4d:ad:8a:fe:
98:9a:3a:cf:15:84:e7:f7:f0:f3:20:ea:71:7a:bc:2f:98:35:
ca:fc:50:0f:8f:b5:7f:5c:3a:8e:7b:1f:04:82:48:7f:57:60:
b7:47:24:e5:f8:be:b2:80:c4:08:6b:7b:a4:8f:a6:a3:6c:c9:
f6:2a:69:8f:01:cf:5f:53:a9:4c:be:1e:10:e1:7f:aa:7d:cf:
c5:7a:ac:d1:98:f2:d9:7e:d1:45:e0:e3:db:15:0e:0a:89:06:
b5:bd:ec:da:72:7d:7e:34:81:81:26:26:c6:d4:cb:e6:52:ce:
e7:aa:aa:c1:91:52:ae:28:c5:52:ad:6b:ea:fa:c3:f2:96:e3:
ed:99:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:27:10 2025 by rpki-client